APPLICANT PRIVACY NOTICE

Last updated: 21 September 2026

This Applicant Privacy Notice explains how XONIT Tech Kft. processes personal data when you apply for an employee, contractor, freelance, project-based or open opportunity with us.

Data controller

XONIT Tech Kft.
Registered office: 1162 Budapest, Szlovák út 28., Hungary
Company registration number: 01-09-420921
Tax number: 32377330-2-42
Email: info@xonit.tech

Data we may process

We may process:

name and contact details;
CV, cover letter and application materials;
employment, project and educational history;
skills, qualifications, language knowledge and professional interests;
portfolio, website and professional social-profile links that you provide;
preferred role, availability, location, time zone and working arrangements;
contractor or business status and, where relevant, compensation expectations;
answers supplied in the application form;
interview notes, assessments and correspondence;
references, but only where appropriate and normally after informing you; and
information necessary to meet legal obligations or establish, exercise or defend legal claims.

Please do not provide special-category data—such as information about health, ethnicity, religion, political opinions, trade-union membership, sexual orientation or biometric/genetic data—unless it is genuinely necessary and specifically requested by us in accordance with applicable law. Please also avoid including identification numbers, full identity-document copies, banking data or unrelated private information in your initial application.

Purposes, legal bases and retention

Managing and assessing your application

We use application data to receive and review your application, communicate with you, assess suitability, arrange interviews, verify relevant information and decide whether to offer an employment, contractor or project relationship.

Legal basis: taking steps at your request before entering into a contract (Article 6(1)(b) GDPR).

Recruitment administration, security and legal claims

We may process data to organise recruitment, prevent misuse, maintain records of the selection process and protect our legal position.

Legal basis: our legitimate interests in conducting a fair, secure and documented recruitment process and in establishing, exercising or defending legal claims (Article 6(1)(f) GDPR).

Compliance with law

Where applicable, we may process data to comply with employment, immigration, tax, equality or other legal obligations.

Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR).

Future opportunities / talent pool

We will retain your application for future opportunities beyond the ordinary recruitment period only if you separately opt in.

Legal basis: your consent (Article 6(1)(a) GDPR). Consent is voluntary and may be withdrawn at any time by contacting info@xonit.tech. Withdrawing consent does not affect the lawfulness of earlier processing and has no negative effect on the current application.

Retention

If you are not selected, application data is normally deleted or anonymised within six months after the relevant recruitment process closes.
If you separately consent to the talent pool, we may retain your application for 12 months from the date of consent, unless you withdraw consent earlier.
If an employment, contractor or project relationship is established, relevant information becomes part of the applicable personnel or contractual records and is retained under the corresponding legal and business retention rules.
Data relevant to a dispute, investigation or legal claim may be retained until the matter and the applicable limitation period have ended.

Recipients and service providers

Application data may be accessed by the persons involved in selection and decision-making at XONIT Tech Kft. and by service providers supporting our website, Wix Forms, hosting, email, cloud storage, communications, IT security or recruitment administration. It may also be disclosed to professional advisers or authorities where required by law or necessary to protect legal rights.

Processors act under contractual data-protection and confidentiality obligations.

International transfers

Some technology providers or their subprocessors may process data outside the European Economic Area. Where no adequacy decision applies, transfers are protected through an appropriate legal mechanism, such as the European Commission's Standard Contractual Clauses, together with supplementary safeguards where required.

Is providing data mandatory?

Providing the information marked as required is necessary for us to consider your application. If you do not provide it, we may be unable to assess or progress the application. Providing additional information and joining the talent pool are voluntary.

Automated decision-making

We do not make recruitment decisions solely by automated means and do not use applicant data for profiling that produces legal or similarly significant effects.

Your rights

Subject to the conditions of the GDPR, you may request access, correction, deletion, restriction and—where applicable—data portability. You may object to processing based on legitimate interests and may withdraw consent at any time where consent is the legal basis.

Requests may be sent to info@xonit.tech.

You may also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information:

NAIH
1055 Budapest, Falk Miksa utca 9-11., Hungary
ugyfelszolgalat@naih.hu
+36 1 391 1400
https://www.naih.hu

Data security

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. No internet transmission or storage system can be guaranteed to be completely secure.

Changes to this notice

We may update this notice when our recruitment process, systems or legal obligations change. The current version and its update date will be published on this page.